.. -*- coding: utf-8 -*-

.. _datamodel_definition:

Yams *schema*

-------------

The **schema** is the core piece of a *CubicWeb* instance as it

defines and handles the data model. It is based on entity types that

are either already defined in `Yams`_ and the *CubicWeb* standard

library; or more specific types defined in cubes. The schema for a

cube is defined in a `schema` python module or package.

.. _`Yams`: http://www.logilab.org/project/yams

.. _datamodel_overview:

Overview

~~~~~~~~

The core idea of the yams schema is not far from the classical

`Entity-relationship`_ model. But while an E/R model (or `logical

model`) traditionally has to be manually translated to a lower-level

data description language (such as the SQL `create table`

sublanguage), also often described as the `physical model`, no such

step is required with |yams| and |cubicweb|.

.. _`Entity-relationship`: http://en.wikipedia.org/wiki/Entity-relationship_model

This is because in addition to high-level, logical |yams| models, one

uses the |rql| data manipulation language to query, insert, update and

delete data. |rql| abstracts as much of the underlying SQL database as

a |yams| schema abstracts from the physical layout. The vagaries of

SQL are avoided.

As a bonus point, such abstraction make it quite comfortable to build

or use different backends to which |rql| queries apply.

So, as in the E/R formalism, the building blocks are ``entities``

(:ref:`EntityType`), ``relationships`` (:ref:`RelationType`,

:ref:`RelationDefinition`) and ``attributes`` (handled like relation

with |yams|).

Let us detail a little the divergences between E/R and |yams|:

* all relationship are binary which means that to represent a

  non-binary relationship, one has to use an entity,

* relationships do not support attributes (yet, see:

  http://www.cubicweb.org/ticket/341318), hence the need to reify it

  as an entity if need arises,

* all entities have an `eid` attribute (an integer) that is its

  primary key (but it is possible to declare uniqueness on other

  attributes)

Also |yams| supports the notions of:

* entity inheritance (quite experimental yet, and completely

  undocumented),

* relation type: that is, relationships can be established over a set

  of couple of entity types (henre the distinction made between

  `RelationType` and `RelationDefinition` below)

Finally |yams| has a few concepts of its own:

* relationships being oriented and binary, we call the left hand

  entity type the `subject` and the right hand entity type the

  `object`

.. note::

   The |yams| schema is available at run time through the .schema

   attribute of the `vregistry`.  It's an instance of

   :class:`cubicweb.schema.Schema`, which extends

   :class:`yams.schema.Schema`.

.. _EntityType:

Entity type

~~~~~~~~~~~

An entity type is an instance of :class:`yams.schema.EntitySchema`. Each entity type has

a set of attributes and relations, and some permissions which define who can add, read,

update or delete entities of this type.

The following built-in types are available: ``String``, ``Int``,

``Float``, ``Decimal``, ``Boolean``, ``Date``, ``Datetime``, ``Time``,

``Interval``, ``Byte`` and ``Password``. They can only be used as

attributes of an other entity type.

You can find more base entity types in

:ref:`pre_defined_entity_types`.

.. XXX yams inheritance

.. _RelationType:

Relation type

~~~~~~~~~~~~~

A relation type is an instance of

:class:`yams.schema.RelationSchema`. A relation type is simply a

semantic definition of a kind of relationship that may occur in an

application.

It may be referenced by zero, one or more relation definitions.

It is important to choose a good name, at least to avoid conflicts

with some semantically different relation defined in other cubes

(since there's only a shared name space for these names).

A relation type holds the following properties (which are hence shared

between all relation definitions of that type):

* `inlined`: boolean handling the physical optimization for archiving

  the relation in the subject entity table, instead of creating a specific

  table for the relation. This applies to relations where cardinality

  of subject->relation->object is 0..1 (`?`) or 1..1 (`1`) for *all* its relation

  definitions.

* `symmetric`: boolean indicating that the relation is symmetrical, which

  means that `X relation Y` implies `Y relation X`.

.. _RelationDefinition:

Relation definition

~~~~~~~~~~~~~~~~~~~

A relation definition is an instance of

:class:`yams.schema.RelationDefinition`. It is a complete triplet

"<subject entity type> <relation type> <object entity type>".

When creating a new instance of that class, the corresponding

:class:`RelationType` instance is created on the fly if necessary.

Properties

``````````

The available properties for relation definitions are enumerated

here. There are several kind of properties, as some relation

definitions are actually attribute definitions, and other are not.

Some properties may be completely optional, other may have a default

value.

Common properties for attributes and relations:

* `description`: an unicode string describing an attribute or a

  relation. By default this string will be used in the editing form of

  the entity, which means that it is supposed to help the end-user and

  should be flagged by the function `_` to be properly

  internationalized.

* `constraints`: a list of conditions/constraints that the relation has to

  satisfy (c.f. `Constraints`_)

* `cardinality`: a two character string specifying the cardinality of

  the relation. The first character defines the cardinality of the

  relation on the subject, and the second on the object. When a

  relation can have multiple subjects or objects, the cardinality

  applies to all, not on a one-to-one basis (so it must be

  consistent...). Default value is '**'. The possible values are

  inspired from regular expression syntax:

    * `1`: 1..1

    * `?`: 0..1

    * `+`: 1..n

    * `*`: 0..n

Attributes properties:

* `unique`: boolean indicating if the value of the attribute has to be

  unique or not within all entities of the same type (false by

  default)

* `indexed`: boolean indicating if an index needs to be created for

  this attribute in the database (false by default). This is useful

  only if you know that you will have to run numerous searches on the

  value of this attribute.

* `default`: default value of the attribute. In case of date types, the values

  which could be used correspond to the RQL keywords `TODAY` and `NOW`.

Properties for `String` attributes:

* `fulltextindexed`: boolean indicating if the attribute is part of

  the full text index (false by default) (*applicable on the type

  `Byte` as well*)

* `internationalizable`: boolean indicating if the value of the

  attribute is internationalizable (false by default)

Relation properties:

* `composite`: string indicating that the subject (composite ==

  'subject') is composed of the objects of the relations. For the

  opposite case (when the object is composed of the subjects of the

  relation), we just set 'object' as value. The composition implies

  that when the relation is deleted (so when the composite is deleted,

  at least), the composed are also deleted.

* `fulltext_container`: string indicating if the value if the full

  text indexation of the entity on one end of the relation should be

  used to find the entity on the other end. The possible values are

  'subject' or 'object'. For instance the use_email relation has that

  property set to 'subject', since when performing a full text search

  people want to find the entity using an email address, and not the

  entity representing the email address.

Constraints

```````````

By default, the available constraint types are:

General Constraints

......................

* `SizeConstraint`: allows to specify a minimum and/or maximum size on

  string (generic case of `maxsize`)

* `BoundConstraint`: allows to specify a minimum and/or maximum value

  on numeric types and date

.. sourcecode:: python

   from yams.constraints import BoundConstraint, TODAY

   BoundConstraint('<=', TODAY())

* `IntervalBoundConstraint`: allows to specify an interval with

  included values

.. sourcecode:: python

     class Node(EntityType):

         latitude = Float(constraints=[IntervalBoundConstraint(-90, +90)])

* `UniqueConstraint`: identical to "unique=True"

* `StaticVocabularyConstraint`: identical to "vocabulary=(...)"

.. XXX Attribute, NOW

RQL Based Constraints

......................

RQL based constraints may take three arguments. The first one is the ``WHERE``

clause of a RQL query used by the constraint. The second argument ``mainvars``

is the ``Any`` clause of the query. By default this include `S` reserved for the

subject of the relation and `O` for the object. Additional variables could be

specified using ``mainvars``. The argument expects a single string with all

variable's name separated by spaces. The last one, ``msg``, is the error message

displayed when the constraint fails. As RQLVocabularyConstraint never fails the

third argument is not available.

* `RQLConstraint`: allows to specify a RQL query that has to be satisfied

  by the subject and/or the object of relation. In this query the variables

  `S` and `O` are reserved for the relation subject and object entities.

* `RQLVocabularyConstraint`: similar to the previous type of constraint except

  that it does not express a "strong" constraint, which means it is only used to

  restrict the values listed in the drop-down menu of editing form, but it does

  not prevent another entity to be selected.

* `RQLUniqueConstraint`: allows to the specify a RQL query that ensure that an

  attribute is unique in a specific context. The Query must **never** return more

  than a single result to be satisfied. In this query the variables `S` is

  reserved for the relation subject entity. The other variables should be

  specified with the second constructor argument (mainvars). This constraints

  should be used when UniqueConstraint doesn't fit. Here is a simple example.

.. sourcecode:: python

    # Check that in the same Workflow each state's name is unique.  Using

    # UniqueConstraint (or unique=True) here would prevent states in different

    # workflows to have the same name.

    # With: State S, Workflow W, String N ; S state_of W, S name N

    RQLUniqueConstraint('S name N, S state_of WF, Y state_of WF, Y name N',

                        mainvars='Y',

                        msg=_('workflow already has a state of that name'))

.. XXX note about how to add new constraint

.. _securitymodel:

The security model

~~~~~~~~~~~~~~~~~~

The security model of `CubicWeb` is based on `Access Control List`.

The main principles are:

* users and groups of users

* a user belongs to at least one group of user

* permissions (read, update, create, delete)

* permissions are assigned to groups (and not to users)

For *CubicWeb* in particular:

* we associate rights at the entities/relations schema level

* the default groups are: `administrators`, `users` and `guests`

Setting permissions is done with the attribute `__permissions__` of entities and

For an entity type, the possible actions are `read`, `add`, `update` and

`delete`.

For each access type, a tuple indicates the name of the authorized groups and/or

one or multiple RQL expressions to satisfy to grant access. The access is

provided if the user is in one of the listed groups or if one of the RQL condition

is satisfied.

The standard user groups

````````````````````````

* `guests`

* `users`

* `managers`

* `owners`: virtual group corresponding to the entity's owner.

  This can only be used for the actions `update` and `delete` of an entity

  type.

Use of RQL expression for write permissions

```````````````````````````````````````````

* in this expression, the variables `X` and `U` are pre-defined references

.. note::

Use of RQL expression for reading rights

````````````````````````````````````````

The principles are the same but with the following restrictions:

Important notes about write permissions checking

````````````````````````````````````````````````

Write permissions (e.g. 'add', 'update', 'delete') are checked in core hooks.

When a permission is checked slightly vary according to if it's an entity or

relation, and if the relation is an attribute relation or not). It's important to

understand that since according to when a permission is checked, values returned

by rql expressions may changes, hence the permission being granted or not.

Here are the current rules:

1. permission to add/update entity and its attributes are checked:

   - on commit if the entity has been added

   - in an 'after_update_entity' hook if the entity has been updated. If it fails

     at this time, it will be retried on commit (hence you get the permission if

     you have it just after the modification or *at* commit time)

2. permission to delete an entity is checked in 'before_delete_entity' hook

3. permission to add a relation is checked either:

   - in 'before_add_relation' hook if the relation type is in the

     `BEFORE_ADD_RELATIONS` set

   - else at commit time if the relation type is in the `ON_COMMIT_ADD_RELATIONS`

     set

   - else in 'after_add_relation' hook (the default)

4. permission to delete a relation is checked in 'before_delete_relation' hook

Last but not least, remember queries issued from hooks and operation are by

default 'unsafe', eg there are no read or write security checks.

See :mod:`cubicweb.hooks.security` for more details.